拆个TP的WR842N V4
看帖的都给我回复！！！不回复以后就不跟你们分享了！那个绿色的PCB就是TP的所谓的“船桨式天线”（貌似TP的船桨式天线我是首拆？！）
看到亮点了吗？连指示灯都开始缩水了！就剩下 系统灯、LAN口灯四个、WAN灯 懂行的大神来看看它的配置信息吧 我看不懂、
tsantong 发表于 2013-11-17 22:48
TP的船桨你不是首拆，以前我见过，其实说船桨的，多数都是印刷pcb的，还有就是，貌似这个flash才1m啊，不会 ...
TP的船桨你不是首拆，以前我见过，其实说船桨的，多数都是印刷pcb的，还有就是，貌似这个flash才1m啊，不会牛逼到这地步吧， 说对了，后面有图 :victory::victory::victory: 补上TTL信息：
---------------------------------------------------------------
U-Boot 1.1.4 (Build from LSDK- at Mar 21 2013 - 10:06:47)
ap143 - Honey Bee 1.1
DRAM: 8 MB
Top of RAM usable for U-Boot at: 80800000
Reserving 128k for U-Boot at: 807dc000
Reserving 132k for malloc() at: 807bb000
Reserving 44 Bytes for Board Info at: 807bafd4
Reserving 36 Bytes for Global Data at: 807bafb0
Reserving 128k for boot params() at: 8079afb0
Stack Pointer at: 8079af98
Now running in RAM - U-Boot at: 807dc000
Flash Manuf Id 0x1c, DeviceId0 0x31, DeviceId1 0x14
flash size 4MB, sector count = 256
Flash:1 MB
Using default environment
In: serial
Out: serial
Err: serial
Net: ath_gmac_enet_initialize...
ath_gmac_enet_initialize: reset mask:c02200
Scorpion ---->S27 PHY*
S27 reg init
: cfg1 0x800c0000 cfg2 0x7114
eth0: a8:15:4d:68:80:7a
athrs27_phy_setup ATHR_PHY_CONTROL 4 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 4 :10
eth0 up
Honey Bee ---->MAC 1 S27 PHY *
S27 reg init
ATHRS27: resetting s27
ATHRS27: s27 reset done
: cfg1 0x800c0000 cfg2 0x7214
eth1: a8:15:4d:68:80:7b
athrs27_phy_setup ATHR_PHY_CONTROL 0 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 0 :10
athrs27_phy_setup ATHR_PHY_CONTROL 1 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 1 :10
athrs27_phy_setup ATHR_PHY_CONTROL 2 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 2 :10
athrs27_phy_setup ATHR_PHY_CONTROL 3 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 3 :10
eth1 up
eth0, eth1
Setting 0x181162c0 to 0x4b97a100
Hit any key to stop autoboot:0
vxWorks.bin from =0x4eec0, len=0x850d2
Uncompressing...done
Attaching interface lo0... done
Rx clbufs 768 each of size 1660
ATHRS27: resetting s27
ATHRS27: s27 reset done
ATHRS27:Port status register read 2:7E
ATHRS27:S27 ATHR_PHY_FUNC_CONTROL (0):862
ATHRS27:S27 ATHR_PHY_ID1(0) :4d
ATHRS27:S27 ATHR_PHY_SPEC_STATUS(0) :10
ATHRS27:S27 ATHR_PHY_STATUS(0) :7949
ATHRS27:S27 ATHR_PHY_FUNC_CONTROL (1):862
ATHRS27:S27 ATHR_PHY_ID1(1) :4d
ATHRS27:S27 ATHR_PHY_SPEC_STATUS(1) :10
ATHRS27:S27 ATHR_PHY_STATUS(1) :7949
ATHRS27:S27 ATHR_PHY_FUNC_CONTROL (2):862
ATHRS27:S27 ATHR_PHY_ID1(2) :4d
ATHRS27:S27 ATHR_PHY_SPEC_STATUS(2) :10
ATHRS27:S27 ATHR_PHY_STATUS(2) :7949
ATHRS27:S27 ATHR_PHY_FUNC_CONTROL (3):862
ATHRS27:S27 ATHR_PHY_ID1(3) :4d
ATHRS27:S27 ATHR_PHY_SPEC_STATUS(3) :10
ATHRS27:S27 ATHR_PHY_STATUS(3) :7949
ATHRS27:S27 CPU_PORT_REGISTER :f0
ATHRS27:S27 PORT_STATUS_REGISTER0:fe
ATHRS27:S27 PORT_STATUS_REGISTER1:1280
ATHRS27:S27 PORT_STATUS_REGISTER2:1280
ATHRS27:S27 PORT_STATUS_REGISTER3:1280
ATHRS27:S27 PORT_STATUS_REGISTER4:1280
ATHRS27:S27 PORT_CONTROL_REGISTER0 :4004
ATHRS27:S27 PORT_CONTROL_REGISTER1 :4004
ATHRS27:S27 PORT_CONTROL_REGISTER2 :4004
ATHRS27:S27 PORT_CONTROL_REGISTER3 :4004
ATHRS27:S27 PORT_CONTROL_REGISTER4 :4004
Setting Drop CRC Errors, Pause Frames and Length Error frames
Setting PHY...
ATHRS27:athrs27_phy_setup ATHR_PHY_CONTROL 0 :1000
ATHRS27:athrs27_phy_setup ATHR_PHY_SPEC_STAUS 0 :10
ATHRS27:athrs27_phy_setup ATHR_PHY_CONTROL 1 :1000
ATHRS27:athrs27_phy_setup ATHR_PHY_SPEC_STAUS 1 :10
ATHRS27:athrs27_phy_setup ATHR_PHY_CONTROL 2 :1000
ATHRS27:athrs27_phy_setup ATHR_PHY_SPEC_STAUS 2 :10
ATHRS27:athrs27_phy_setup ATHR_PHY_CONTROL 3 :1000
ATHRS27:athrs27_phy_setup ATHR_PHY_SPEC_STAUS 3 :10
ae1 Verify MAC address 7A80684D 15A80000
sb = A8 15 4D 68 80 7A
ATHRS27:ATHRS27:OPERATIONAL_MODE_REG0:40
ATHRS27:ATHRS27:REG 0x4-->:40
ATHRS27:ATHRS27:REG 0x2c-->:fe7f007f
ATHRS27:ATHRS27:REG 0x8-->:10000000
Setting Drop CRC Errors, Pause Frames and Length Error frames
Setting PHY...
ATHRS27:athrs27_phy_setup ATHR_PHY_CONTROL 4 :1000
ATHRS27:athrs27_phy_setup ATHR_PHY_SPEC_STAUS 4 :10
ae0 Verify MAC address 7B80684D 15A80000
sb = A8 15 4D 68 80 7B
Version2.0
Software Platform for PNE2.2
Copyright(C) 2001-2011 by TP-LINK TECHNOLOGIES CO., LTD.
Creation date: Sep 16 2013, 19:07:11
# Moduler MODULER-CONTROL: start working.
All config data size = 22252, srart address= 0x804899d0.
Moduler MODULER-CONTROL: size = 16, srtart address = 0x804899d0.
Moduler SYSTEM-LOG: size = 280, srtart address = 0x804899e0.
Moduler TDDP-AGENT: size = 0, srtart address = 0x80489af8.
Moduler OEMDEF: size = 592, srtart address = 0x80489af8.
Moduler BRIDGE: size = 0, srtart address = 0x80489d48.
Moduler ACCOUNT: size = 44, srtart address = 0x80489d48.
Moduler WEB-V4: size = 0, srtart address = 0x80489d74.
Moduler wizard: size = 0, srtart address = 0x80489d74.
Moduler OPMODE: size = 4, srtart address = 0x80489d74.
Moduler LAN: size = 16, srtart address = 0x80489d78.
Moduler UPnP: size = 0, srtart address = 0x80489d88.
Moduler WLAN: size = 3380, srtart address = 0x80489d88.
Moduler MAC-CLONE: size = 0, srtart address = 0x8048aabc.
Moduler DHCPS: size = 1964, srtart address = 0x8048aabc.
Moduler IF-NAT: size = 0, srtart address = 0x8048b268.
Moduler WAN: size = 4, srtart address = 0x8048b268.
Moduler LINKMODE: size = 4, srtart address = 0x8048b26c.
Moduler STATIC-IP: size = 32, srtart address = 0x8048b270.
Moduler DHCPC: size = 104, srtart address = 0x8048b290.
Moduler PPPoE: size = 600, srtart address = 0x8048b2f8.
Moduler VIRTSVR: size = 904, srtart address = 0x8048b550.
Moduler IGDV2: size = 4, srtart address = 0x8048b8d8.
Moduler DMZ-HOST: size = 8, srtart address = 0x8048b8dc.
Moduler STATIC-ROUTER: size = 328, srtart address = 0x8048b8e4.
Moduler Statistics: size = 20, srtart address = 0x8048ba2c.
Moduler AccessCtrl: size = 10860, srtart address = 0x8048ba40.
Moduler Security: size = 40, srtart address = 0x8048e4ac.
Moduler ARPBIND: size = 648, srtart address = 0x8048e4d4.
Moduler ADDITIONDNS: size = 0, srtart address = 0x8048e75c.
Moduler DNS-PROXY: size = 0, srtart address = 0x8048e75c.
Moduler DDNS: size = 1740, srtart address = 0x8048e75c.
Moduler IPQOS: size = 572, srtart address = 0x8048ee28.
Moduler LOGIN-PASSWORD: size = 0, srtart address = 0x8048f064.
Moduler USER-REBOOT: size = 0, srtart address = 0x8048f064.
Moduler RESET: size = 0, srtart address = 0x8048f064.
Moduler DIAGNOSTIC: size = 0, srtart address = 0x8048f064.
Moduler BAKNRESTORE: size = 0, srtart address = 0x8048f064.
Moduler HTTP-FIRMWARE: size = 0, srtart address = 0x8048f064.
Moduler IGMP: size = 4, srtart address = 0x8048f064.
Moduler ANTI-SNIFFER: size = 0, srtart address = 0x8048f068.
Moduler SNTPC: size = 84, srtart address = 0x8048f068.
Moduler SYSTEM-LOG: start working.
Moduler TDDP-AGENT: start working.
Moduler OEMDEF: start working.
Moduler BRIDGE: start working.
Moduler ACCOUNT: start working.
Moduler WEB-V4: start working.
Moduler wizard: start working.
Moduler OPMODE: start working.
Moduler LAN: start working.
Moduler UPnP: start working.
Moduler WLAN: start working.
Enterprise mode: 0x00000000
Restoring Cal data from Flash
correct CRC of the calData stored in flash is 0x7bd1a813
actual CRC of the calData stored in flash is 0xffffffff
Cal data read from flash is ERROR.
Use default cal data in memory.
802FAB40:02 02 00 03 7F 4E C0 00 - 00 00 00 00 00 00 00 00 ....N.. ........
802FAB50:00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 1F 00 ........ ........
802FAB60:33 02 00 00 00 00 04 00 - 5C 00 4C 00 03 00 08 FF 3....... \.L.....
802FAB70:11 00 00 00 00 10 01 10 - 00 22 22 02 00 50 01 50 ........ .""..P.P
802FAB80:01 50 01 00 00 00 00 00 - 00 24 00 64 7D A4 AF 00 .P...... .$.d}...
802FAB90:FF 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ........ ........
802FABA0:0E 0E 03 00 2C E2 00 02 - 0E 1C 80 C0 80 0C 80 C0 ....,... ........
802FABB0:80 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ........ ........
802FABC0:00 00 00 00 00 00 00 00 - 00 00 70 89 A2 00 00 7C ........ ..p....|
802FABD0:00 00 00 00 00 80 00 00 - 00 00 00 80 00 00 00 00 ........ ........
802FABE0:00 7E 00 00 00 00 00 7F - 00 00 00 00 00 7F 00 00 .~..... .......
802FABF0:00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ........ ........
802FAC00:00 00 00 70 AC 70 89 AC - 70 89 AC 70 89 AC 28 28 ...p.p.. p..p..((
802FAC10:28 28 28 28 28 28 28 28 - 22 1E 28 28 22 1E 28 28 (((((((( ".((".((
802FAC20:22 1E 24 24 20 1E 1C 1A - 20 1E 1C 1A 20 20 1C 14 ".$$ ........
802FAC30:24 24 20 1E 1C 1A 20 1E - 1C 1A 20 20 1C 14 24 24 $$ ... . ....$$
802FAC40:20 1E 1C 1A 20 1E 1C 1A - 20 20 1C 14 22 22 1E 1C ... ... ..""..
802FAC50:1A 18 1E 1C 1A 18 20 20 - 1C 14 22 22 1E 1C 1A 18 ...... ..""....
802FAC60:1E 1C 1A 18 20 20 1C 14 - 22 22 1E 1C 1A 18 1E 1C ...... ""......
802FAC70:1A 18 20 20 1C 14 11 12 - 15 17 41 42 45 47 31 32 ...... ..ABEG12
802FAC80:35 37 70 75 9D A2 70 75 - A2 FF 70 75 A2 FF 7A 7F 57pu..pu ..pu..z
802FAC90:93 98 70 75 AC B8 70 75 - AC 00 70 75 AC 00 7A 7F ..pu..pu ..pu..z
802FACA0:93 A2 70 75 AC 00 70 75 - AC 00 70 75 AC 00 7A 7F ..pu..pu ..pu..z
802FACB0:93 A2 3C 7C 3C 3C 3C 7C - 3C 3C 7C 3C 3C 7C 7C 3C ..<|<<<| <<|<<||<
802FACC0:3C 3C 3C 7C 3C 3C 3C 7C - 3C 3C 3C 7C 7C 3C 3C 7C <<<|<<<| <<<||<<|
802FACD0:3C 3C 3C 7C 3C 3C 3C 7C - 3C 3C 3C 7C 7C 7C 3C 7C <<<|<<<| <<<|||<|
802FACE0:7C 7C 10 01 00 00 22 22 - 02 00 00 00 00 00 00 00 ||...."" ........
802FACF0:00 00 00 00 00 00 44 00 - 00 00 00 00 00 FF 00 00 ......D. ........
802FAD00:00 00 00 00 00 00 00 00 - 00 00 00 00 00 0E 0E 03 ........ ........
802FAD10:00 2D E2 00 02 0E 1C E0 - E0 F0 0C E0 E0 F0 6C 00 .-...... ......l.
802FAD20:00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ........ ........
802FAD30:00 00 00 00 00 00 00 4C - 54 68 78 8C A0 B9 CD 00 .......L Thx.....
802FAD40:00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ........ ........
802FAD50:00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ........ ........
802FAD60:00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ........ ........
802FAD70:00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ........ ........
802FAD80:00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ........ ........
802FAD90:00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ........ ........
802FADA0:00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ........ ........
802FADB0:00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ........ ........
802FADC0:00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 4C ........ .......L
802FADD0:54 68 78 8C A0 B9 CD 4C - 58 68 8C B4 BD B9 CD 4C Thx....L Xh.....L
802FADE0:58 68 8C B4 BD B9 CD 14 - 14 14 0A 14 14 14 0A 14 Xh...... ........
802FADF0:14 14 0A 14 14 14 0A 14 - 14 14 0A 14 14 14 0A 14 ........ ........
802FAE00:14 14 0A 14 14 14 0A 14 - 14 0A 0A 00 00 0A 0A 00 ........ ........
802FAE10:00 0A 0A 00 00 14 14 0A - 0A 00 00 0A 0A 00 00 0A ........ ........
802FAE20:0A 00 00 14 14 0A 0A 00 - 00 0A 0A 00 00 0A 0A 00 ........ ........
802FAE30:00 14 14 0A 0A 00 00 0A - 0A 00 00 0A 0A 00 00 14 ........ ........
802FAE40:14 0A 0A 00 00 0A 0A 00 - 00 0A 0A 00 00 14 14 0A ........ ........
802FAE50:0A 00 00 0A 0A 00 00 0A - 0A 00 00 14 14 0A 0A 00 ........ ........
802FAE60:00 0A 0A 00 00 0A 0A 00 - 00 14 14 0A 0A 00 00 0A ........ ........
802FAE70:0A 00 00 0A 0A 00 00 14 - 14 0A 0A 00 00 0A 0A 00 ........ ........
802FAE80:00 0A 0A 00 00 14 14 0A - 0A 00 00 0A 0A 00 00 0A ........ ........
802FAE90:0A 00 00 14 14 0A 0A 00 - 00 0A 0A 00 00 0A 0A 00 ........ ........
802FAEA0:00 14 14 0A 0A 00 00 0A - 0A 00 00 0A 0A 00 00 14 ........ ........
802FAEB0:14 0A 0A 00 00 0A 0A 00 - 00 0A 0A 00 00 14 14 0A ........ ........
802FAEC0:0A 00 00 0A 0A 00 00 0A - 0A 00 00 14 14 0A 0A 00 ........ ........
802FAED0:00 0A 0A 00 00 0A 0A 00 - 00 14 14 0A 0A 00 00 0A ........ ........
802FAEE0:0A 00 00 0A 0A 00 00 10 - 16 18 40 46 48 30 36 38 ........ ..@FH068
802FAEF0:4C 5C 60 8C A0 B4 BD CD - 4C 5C 60 8C 90 B4 BD CD L\`..... L\`.....
802FAF00:4E 56 5E 66 8E 96 AE BF - 4C 50 5C 68 8C B4 FF FF NV^f.... LP\h....
802FAF10:4C 5C 8C B4 FF FF FF FF - 4E 5E 66 8E 9E AE FF FF L\...... N^f.....
802FAF20:4C 50 54 5C 8C A0 B4 BD - 4C 5C 68 8C 98 B4 BD CD LPT\.... L\h.....
802FAF30:4E 56 5E 8E 96 AE BF C7 - 7C 7C 7C 7C 7C 7C 7C 3C NV^..... |||||||<
802FAF40:7C 7C 7C 7C 7C 7C 7C 3C - 3C 7C 3C 7C 7C 7C 7C 7C |||||||< <|<|||||
802FAF50:3C 7C 7C 3C 7C 3C 3C 3C - 7C 7C 7C 3C 3C 3C 3C 3C <||<|<<< |||<<<<<
802FAF60:7C 7C 7C 7C 7C 3C 3C 3C - 7C 7C 7C 7C 7C 7C 7C 7C |||||<<< ||||||||
802FAF70:7C 7C 3C 7C 7C 7C 7C 3C - 7C 3C 7C 7C 7C 7C 3C 7C ||<||||< |<||||<|
Moduler MAC-CLONE: start working.
Moduler DHCPS: start working.
Moduler IF-NAT: start working.
Moduler WAN: start working.
Moduler LINKMODE: start working.
Set phy 4 link mode 0x01.
Moduler STATIC-IP: start working.
Moduler DHCPC: start working.
add net 0.0.0.0: gateway 169.254.128.122
Moduler PPPoE: start working.
Moduler VIRTSVR: start working.
Moduler IGDV2: start working.
Moduler DMZ-HOST: start working.
Moduler STATIC-ROUTER: start working.
Moduler Statistics: start working.
Moduler AccessCtrl: start working.
Moduler Security: start working.
Moduler ARPBIND: start working.
Moduler ADDITIONDNS: start working.
Moduler DNS-PROXY: start working.
Moduler DDNS: start working.
Moduler IPQOS: start working.
Moduler LOGIN-PASSWORD: start working.
Moduler USER-REBOOT: start working.
Moduler RESET: start working.
Moduler DIAGNOSTIC: start working.
Moduler BAKNRESTORE: start working.
Moduler HTTP-FIRMWARE: start working.
Moduler IGMP: start working.
Moduler ANTI-SNIFFER: start working.
Moduler SNTPC: start working.
---------------------------------------------------------------------------------------------- 这板子做工可以啊！连天线都是印刷电路板的！;P;P;P;P;P 1M\8M:L
正好我今天收了个全新742N、没敢拆、这外壳卡扣太紧之前暴力拆了740N搞到前面小竖格都掉了些……:lol 和841 V10.1的完全一样啊 动手能力不错，谢谢分享
TP的船桨你不是首拆，以前我见过，其实说船桨的，多数都是印刷pcb的，还有就是，貌似这个flash才1m啊，不会牛逼到这地步吧， 本帖最后由 crskynet 于 2013-11-18 09:07 编辑
1M/8M 新版本再次缩水一半！这种PCB印制天线成本也更低了！ 求知识 这个842N TTL 怎么接的。。 我也有这个，想知道内存条大小，怎么硬改。不过它的信号是蛮强的，开阔地手机极限接收2000米距离。